This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/a4fa90-c27e-4bea-8b07-a735ca1084b7/1/lyCd8jSWuD5ylcHwCB_UZElDqqc.roa File: lyCd8jSWuD5ylcHwCB_UZElDqqc.roa (raw, json) Hash identifier: yIuhwu9g6Xxe3O7KESvgNx7V8m2Ye7H/CuRv/nEh5KQ= Subject key identifier: 97:20:9D:F2:34:96:B8:3E:72:95:C1:F0:08:1F:D4:64:49:43:AA:A7 Certificate issuer: /CN=f7806ac35f2eac02cca046d650fb22befee68d43 Certificate serial: 019B7EA731C4DBE0704309D3107F8F816C60 Authority key identifier: F7:80:6A:C3:5F:2E:AC:02:CC:A0:46:D6:50:FB:22:BE:FE:E6:8D:43 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/94Bqw18urALMoEbWUPsivv7mjUM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/a4fa90-c27e-4bea-8b07-a735ca1084b7/1/lyCd8jSWuD5ylcHwCB_UZElDqqc.roa Signing time: Fri 02 Jan 2026 12:20:45 +0000 ROA not before: Fri 02 Jan 2026 12:20:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35472 IP address blocks: 193.218.44.0/22 maxlen: 22 193.218.48.0/20 maxlen: 20 193.218.64.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/a4fa90-c27e-4bea-8b07-a735ca1084b7/1/94Bqw18urALMoEbWUPsivv7mjUM.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/a4fa90-c27e-4bea-8b07-a735ca1084b7/1/94Bqw18urALMoEbWUPsivv7mjUM.mft rsync://rpki.ripe.net/repository/DEFAULT/94Bqw18urALMoEbWUPsivv7mjUM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:31:c4:db:e0:70:43:09:d3:10:7f:8f:81:6c:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f7806ac35f2eac02cca046d650fb22befee68d43 Validity Not Before: Jan 2 12:20:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=97209df23496b83e7295c1f0081fd4644943aaa7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ba:44:e2:ee:8d:64:ce:94:23:42:07:74:b3: 8a:76:6d:3d:9c:17:c7:ef:0f:9f:9b:4d:7e:6c:dc: 7c:52:a3:68:fa:d5:73:92:0b:93:45:fc:bf:d4:48: ec:bb:66:bc:2c:fd:e4:91:c8:ea:f6:c3:39:09:4b: ea:b4:17:95:95:5a:36:5e:75:46:8d:de:c4:1f:1c: e0:d7:b8:e8:c2:dc:2a:f4:fa:2a:4c:a1:d0:73:18: 30:c2:ff:0e:18:e9:a8:3b:e3:85:fc:05:32:93:7b: 9f:14:6e:bf:36:fb:c2:88:83:74:cb:32:a3:06:27: e2:31:43:5d:cd:74:a4:ed:a0:aa:73:65:cf:2e:bc: 63:c6:7d:58:6f:9c:9f:0e:6c:4e:15:93:61:eb:f6: 4b:24:cb:85:46:49:f4:2e:3f:c6:d8:57:db:fb:ca: 34:a8:1f:cb:b1:bf:c1:ba:d2:5a:d3:65:31:dd:9e: 90:8e:23:85:66:16:2a:4a:08:2b:3c:9a:16:64:7f: f2:65:2d:a4:f3:ce:79:06:53:11:c2:ed:c4:51:15: 37:3f:c0:08:8f:b0:3f:52:90:af:69:16:af:00:d0: 7c:74:bc:82:11:14:3b:14:ab:28:49:67:a0:6e:f4: 9b:ee:ad:8b:3a:f2:54:12:4e:ab:8a:23:e8:c1:61: 84:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:20:9D:F2:34:96:B8:3E:72:95:C1:F0:08:1F:D4:64:49:43:AA:A7 X509v3 Authority Key Identifier: keyid:F7:80:6A:C3:5F:2E:AC:02:CC:A0:46:D6:50:FB:22:BE:FE:E6:8D:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/94Bqw18urALMoEbWUPsivv7mjUM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a4fa90-c27e-4bea-8b07-a735ca1084b7/1/lyCd8jSWuD5ylcHwCB_UZElDqqc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a4fa90-c27e-4bea-8b07-a735ca1084b7/1/94Bqw18urALMoEbWUPsivv7mjUM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.218.44.0-193.218.71.255 Signature Algorithm: sha256WithRSAEncryption 4a:df:3c:11:47:65:2f:87:a2:75:54:ee:07:f3:80:a0:e6:fb: 08:a9:1c:40:86:da:02:5c:32:70:8d:91:4a:9a:0d:3f:30:d6: 55:72:3b:e5:2f:2c:42:bf:8a:04:57:39:dd:86:84:80:a6:c8: 96:1d:d3:3c:00:ad:4c:5c:2e:f2:6e:05:68:2d:0d:06:2d:0c: 21:dd:c5:38:25:be:60:da:f0:e4:aa:f1:b5:67:3f:6d:b6:b6: 91:80:e8:c8:50:30:f1:8b:1e:0c:89:b7:da:60:91:fd:ed:cb: 77:be:1b:65:74:f9:b3:f3:3b:de:51:7e:ae:51:f2:cc:29:2c: 4d:bc:1e:32:f7:18:f7:7d:8b:4a:71:ce:4e:db:c1:8f:19:1b: 15:7f:98:af:66:8f:8c:da:50:eb:47:5d:55:b1:a1:35:c5:29: b0:4e:c3:b2:b4:17:3e:7e:21:20:a3:d1:89:ef:ba:3d:4c:81: 92:0a:21:92:68:9e:ce:17:a1:cf:b6:d1:0b:8d:f1:62:9f:44: fd:45:6d:a9:d6:11:7a:77:29:4f:df:67:8e:dd:d7:fd:1e:de: ec:46:db:24:65:8c:48:75:0d:b9:40:85:1b:54:28:fe:22:f5: 88:39:38:e5:ec:19:f8:5e:06:60:6e:37:8c:8c:2d:17:5d:c1: 64:80:b9:be -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt+pzHE2+BwQwnTEH+PgWxgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3ODA2YWMzNWYyZWFjMDJjY2EwNDZkNjUwZmIyMmJlZmVl NjhkNDMwHhcNMjYwMTAyMTIyMDQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NzIwOWRmMjM0OTZiODNlNzI5NWMxZjAwODFmZDQ2NDQ5NDNhYWE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrpE4u6NZM6UI0IHdLOKdm09nBfH 7w+fm01+bNx8UqNo+tVzkguTRfy/1Ejsu2a8LP3kkcjq9sM5CUvqtBeVlVo2XnVG jd7EHxzg17jowtwq9PoqTKHQcxgwwv8OGOmoO+OF/AUyk3ufFG6/NvvCiIN0yzKj BifiMUNdzXSk7aCqc2XPLrxjxn1Yb5yfDmxOFZNh6/ZLJMuFRkn0Lj/G2Ffb+8o0 qB/Lsb/ButJa02Ux3Z6QjiOFZhYqSggrPJoWZH/yZS2k8855BlMRwu3EURU3P8AI j7A/UpCvaRavANB8dLyCERQ7FKsoSWegbvSb7q2LOvJUEk6riiPowWGEowIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFJcgnfI0lrg+cpXB8Agf1GRJQ6qnMB8GA1UdIwQY MBaAFPeAasNfLqwCzKBG1lD7Ir7+5o1DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOTRCcXcxOHVyQUxNb0ViV1VQc2l2djdtalVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9hNGZhOTAtYzI3ZS00YmVhLThiMDct YTczNWNhMTA4NGI3LzEvbHlDZDhqU1d1RDV5bGNId0NCX1VaRWxEcXFjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9hNGZhOTAtYzI3ZS00YmVhLThiMDctYTczNWNhMTA4NGI3 LzEvOTRCcXcxOHVyQUxNb0ViV1VQc2l2djdtalVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBALB2iwD BAPB2kAwDQYJKoZIhvcNAQELBQADggEBAErfPBFHZS+HonVU7gfzgKDm+wipHECG 2gJcMnCNkUqaDT8w1lVyO+UvLEK/igRXOd2GhICmyJYd0zwArUxcLvJuBWgtDQYt DCHdxTglvmDa8OSq8bVnP222tpGA6MhQMPGLHgyJt9pgkf3ty3e+G2V0+bPzO95R fq5R8swpLE28HjL3GPd9i0pxzk7bwY8ZGxV/mK9mj4zaUOtHXVWxoTXFKbBOw7K0 Fz5+ISCj0Ynvuj1MgZIKIZJons4Xoc+20QuN8WKfRP1FbanWEXp3KU/fZ47d1/0e 3uxG2yRljEh1DblAhRtUKP4i9Yg5OOXsGfheBmBuN4yMLRddwWSAub4= -----END CERTIFICATE-----Generated at Tue Feb 10 03:09:22 2026 by rpki-client